diff options
| author | SChernykh <15806605+SChernykh@users.noreply.github.com> | 2026-06-03 20:47:05 +0200 |
|---|---|---|
| committer | SChernykh <15806605+SChernykh@users.noreply.github.com> | 2026-06-03 20:49:42 +0200 |
| commit | ab6a1c8a3da2b252599fcb72c16f26fa56ba4cc8 (patch) | |
| tree | 391924ded61882e2250439c54405857a06548f6a /src | |
| parent | 8a1de602f0a049d85d6f2c7a231d90b3c9cb310e (diff) | |
| download | monzero-core-ab6a1c8a3da2b252599fcb72c16f26fa56ba4cc8.tar.gz monzero-core-ab6a1c8a3da2b252599fcb72c16f26fa56ba4cc8.tar.xz monzero-core-ab6a1c8a3da2b252599fcb72c16f26fa56ba4cc8.zip | |
tx_pool: fix use-after-free in prune()
- txid was a reference to an item which was later deleted in remove_tx_from_transient_lists(), and txid was used after that
Diffstat (limited to 'src')
| -rw-r--r-- | src/cryptonote_core/tx_pool.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/cryptonote_core/tx_pool.cpp b/src/cryptonote_core/tx_pool.cpp index badcde361..aec0b64f4 100644 --- a/src/cryptonote_core/tx_pool.cpp +++ b/src/cryptonote_core/tx_pool.cpp @@ -416,7 +416,7 @@ namespace cryptonote break; try { - const crypto::hash &txid = it->second; + const crypto::hash txid = it->second; txpool_tx_meta_t meta; if (!m_blockchain.get_txpool_tx_meta(txid, meta)) { |